~ / search / GHSA-pvjf-4hfg-wr84

GHSA-pvjf-4hfg-wr84

Incorrect control flow in Jenkins Gradle Plugin breaks credentials masking in the build log

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-39152

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:gradle < 2.8.1 2.8.1

Details

As written in the advisory (Markdown source, shown as plain text).

Always-incorrect control flow implementation in Jenkins Gradle Plugin 2.8 may result in credentials not being masked (i.e., replaced with asterisks) in the build log in some circumstances.

References

External links from the advisory. They lead to third-party sites.